Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: 3E5CGPKdAqbQckas0a5zWR1ZsZRTSNzeaXY11llWXxU=
Subject key identifier: 9A:CA:59:B1:DC:E3:A6:B7:5B:48:D9:55:2E:1F:27:B2:6A:FF:7C:6D
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 01984E54CE9D7A147E5A5B605C4238E3D665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 0DAB
Signing time: Mon 28 Jul 2025 00:00:37 +0000
Manifest this update: Mon 28 Jul 2025 00:00:37 +0000
Manifest next update: Tue 29 Jul 2025 00:00:37 +0000
Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=)
2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=)
3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=)
4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: n6KSBv6DTFwUT8iC7dcJisJrY9sJlOJwXmi6/wxxOBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:54:ce:9d:7a:14:7e:5a:5b:60:5c:42:38:e3:d6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jul 28 00:00:37 2025 GMT
Not After : Jul 29 00:00:37 2025 GMT
Subject: CN=9aca59b1dce3a6b75b48d9552e1f27b26aff7c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:3b:98:67:3a:f2:3c:7b:d4:14:45:47:1c:
22:41:05:30:a7:8f:95:e7:5e:30:ef:a2:c4:d3:d9:
2c:32:f4:db:9f:fd:05:31:22:40:27:82:0d:f7:db:
2a:9d:6f:8f:6c:7d:05:ec:80:b5:a1:6e:14:87:e5:
17:58:7b:57:a9:63:3f:2a:ca:13:00:ad:ed:d4:08:
37:16:d2:03:4a:69:17:cf:f2:af:df:75:b6:0e:65:
00:2d:e2:cf:9c:3e:9c:cb:4a:07:06:d7:24:b8:e0:
77:fe:d0:39:13:c0:2e:13:b8:65:29:31:4d:b6:e3:
4b:c2:91:ef:c7:f7:55:5d:13:a7:66:ee:27:e5:72:
95:6d:04:d7:f1:40:44:33:85:73:cc:f2:93:79:f3:
2d:f1:ce:06:05:ab:19:e7:91:e8:a0:48:4b:59:00:
cf:b6:0c:6d:85:c7:e5:0a:06:d9:2f:44:d6:77:78:
52:6c:c8:74:1f:c5:71:fe:f3:54:8d:e6:80:c1:37:
c5:bd:86:95:4c:d6:49:ff:16:da:b5:81:1f:1f:b8:
6d:5c:b0:e6:d7:d6:e6:bd:47:e6:41:7b:00:78:b6:
ec:40:50:d6:5d:b2:95:c5:54:be:4c:12:ac:b8:73:
a9:9e:ae:5a:42:d1:b7:92:a9:0d:fe:fe:bd:30:17:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CA:59:B1:DC:E3:A6:B7:5B:48:D9:55:2E:1F:27:B2:6A:FF:7C:6D
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:14:96:1a:92:36:ac:8e:00:96:15:98:50:09:d0:f7:4f:b9:
3d:ce:ac:1d:2a:13:5f:11:73:80:e9:c1:37:64:a5:0d:15:0d:
a6:0d:33:23:f1:20:50:df:e3:b3:17:47:6a:1f:63:f4:d1:e1:
79:58:90:ee:76:08:f7:a5:28:12:e8:33:df:18:23:47:e2:18:
c4:1c:1a:80:cd:59:8d:87:f2:2f:a7:4c:30:2c:2b:7c:d1:c2:
26:40:76:32:87:8b:91:7d:f0:58:36:49:01:c1:95:aa:ce:be:
c3:e3:ae:35:e5:42:f4:e1:b4:6d:f1:f7:ea:17:99:e1:d6:10:
ba:a5:f8:da:0e:f8:9e:4a:40:11:0c:5c:cd:7e:0e:0b:43:0a:
e8:e3:a9:da:44:11:3f:1d:52:27:73:ca:39:2f:63:2c:61:5a:
36:3b:d7:3a:0f:e3:5e:83:0b:a5:02:b0:31:68:94:2f:6b:16:
fd:ba:80:ae:93:db:18:de:e4:3f:52:3b:5e:81:91:71:2d:79:
e7:a3:1e:ae:81:e3:26:90:c6:27:ca:52:6e:84:1f:ad:af:bf:
5e:2a:47:27:5a:86:5a:4f:50:71:25:58:f6:0e:8f:7d:b8:05:
5b:6c:d6:f0:ec:66:6d:3f:8f:eb:bd:ca:25:3f:fe:21:ce:75:
3c:3c:7e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:47:57 2025 by rpki-client